Media
CVE-2024-9159
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 1.998
Restablecer filtros
Crítica
CVE-2024-9053
vLLM allows Remote Code Execution by Pickle Deserialization via AsyncEngineRPCServer() RPC server entrypoints
Media
CVE-2024-10955
A Regular Expression Denial of Service (ReDoS) vulnerability exists in gaizhenbiao/chuanhuchatgpt, as of commit 20b2e02. The server uses the regex pattern `r'<[^>]+>'` to parse user input. In Python's
Media
CVE-2024-10707
gaizhenbiao/chuanhuchatgpt version git d4ec6a3 is affected by a local file inclusion vulnerability due to the use of the gradio component gr.JSON, which has a known issue (CVE-2024-4941). This vulnera
Media
CVE-2025-29770
vLLM denial of service via outlines unbounded cache on disk
Media
CVE-2025-25302
Rembg is a tool to remove images background. In Rembg 2.0.57 and earlier, the CORS middleware is setup incorrectly. All origins are reflected, which allows any website to send cross site requests to t
Alta
CVE-2025-25301
Rembg is a tool to remove images background. In Rembg 2.0.57 and earlier, the /api/remove endpoint takes a URL query parameter that allows an image to be fetched, processed and returned. An attacker m
Alta
ghsa-3x5x-fw77-g54c
dmlc/dgl Vulnerable to Remote Code Execution by Pickle Deserialization via rpc.recv_request()
Baja
CVE-2025-24023
Flask-AppBuilder Observable Response Discrepancy
Sin evaluar
pysec-2025-6
Exfiltrates cookies to hardcoded IP address
Sin evaluar
pysec-2025-5
Exfiltrates user cookies to hardcoded server endpoint during normal operations
Sin evaluar
pysec-2025-3
When using the project to bypass Deezer API restrictions, project exfiltrates user data to a hardcoded server.
Sin evaluar
pysec-2025-4
When using the project to bypass Deezer API restrictions, project exfiltrates user data to a hardcoded server.
Alta
CVE-2024-8550
A Local File Inclusion (LFI) vulnerability exists in the /load-workflow endpoint of modelscope/agentscope version v0.0.4. This vulnerability allows an attacker to read arbitrary files from the server,
Crítica
CVE-2025-24370
Django-Unicorn Class Pollution Vulnerability, Leading to XSS, DoS and Authentication Bypass
Media
CVE-2024-37303
Synapse's unauthenticated writes to the media repository allow planting of problematic content
Alta
CVE-2024-37302
Synapse denial of service through media disk space consumption
Alta
CVE-2024-54000
MobSF vulnerability allows SSRF due to the allow_redirects=True parameter
Alta
CVE-2024-52581
Litestar allows unbounded resource consumption (DoS vulnerability)
Crítica
CVE-2024-47533
cobbler allows anyone to connect to cobbler XML-RPC server with known password and make changes
Media
CVE-2024-51751
Gradio vulnerable to arbitrary file read with File and UploadButton components
Crítica
CVE-2024-10081
codechecker vulnerable to authentication bypass when using specifically crafted URLs
Alta
CVE-2024-47821
pyLoad vulnerable to remote code execution by download to /.pyload/scripts using /flashgot API
Alta
CVE-2024-47871
Gradio uses insecure communication between the FRP client and server
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.